Meet the Chairs: Government Relations Working Group

The ISAO Standards Organization (ISAO SO) continues its blog series, Meet the Chairs, by introducing the chairs of the Government Relations Working Group. This working group is led by Doug DePeppe and Mark Boggis. Currently, the group is developing ISAO SP 6001: State-Level Enabling and Partnering with Private Sector ISAOs.

Mr. DePeppe, a former advisor to the White House 60-Day Cyberspace Policy Review, has fashioned a niche practice as a cyber-risk attorney and consultant, as well as possessing diverse expertise across multiple cyberspace verticals. He helps businesses design and implement commercially reasonable security practices to mitigate the growing liability exposure from cybersecurity threats. Data breach response, privacy, compliance, legislation, law enforcement and national security assistance, forensics analysis, and national and international engagements related to public-private partnerships and cyber-threat information sharing frameworks are part of Mr. DePeppe’s portfolio. He offers expertise in all facets of the law and policy dimensions to the cybersecurity challenge, in both the commercial and government spaces.

Mr. DePeppe has been centrally involved in national-level and leading commercial cybersecurity initiatives for a decade. Not a newcomer to the cyberlaw practice, Mr. DePeppe’s deep background includes service for two White House cybersecurity initiatives. His appointment as a Subject Matter Expert was cited in the White House-directed, Energy Department report: Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2) released in 2012.

Mr. DePeppe engages in a multidisciplinary practice as Founder of EosEdge Legal. He is a part-owner of Cyber Threat Intelligence Network (CTIN), and is Co-founder of the Cyber Resilience Institute, a seminal regional threat information exchange and cyber-resilience center with regional affiliations across the Nation’s landscape. He pursues similar endeavors internationally. He has supported capacity building cyber projects with international organizations, including the International Telecommunications Union and the International Multilateral Partnership Against Cyber Threats (IMPACT). Mr. DePeppe’s ventures and affiliations are available at his website: www.cyberjurist.net. He is a partner with several cyber insurance carriers, providing incident response services, training, networking, and mentoring.

Previously, Mr. DePeppe was the legal advisor to US-CERT and the National Cyber Security Division, Department of Homeland Security. He retired from the Army JAG Corps in 2008, and served as legal advisor to the Army Network Operations Security Center, Army Knowledge Online (AKO) portal, and as operations counsel supporting computer network operations and space operations functioning in support of a command in a theater of operations. He also has extensive experience related to all facets of Defense and Homeland Security programs and initiatives to integrate cybersecurity efforts across the interagency, state and local governments, the private sector and critical infrastructure. Mr. DePeppe was also a prosecutor and Capital Case Certified Defense Counsel. As such, he is well-versed in the privacy, constitutional, criminal, and role of government issues that permeate the emergent cybersecurity challenge facing government, industry, and society.

Affiliations

• Cybersecurity Working Group Chair, Regional Consortium Coordinating Council
• Editorial Board, Journal of Law and Cyber Warfare
• Co-founder, Cyber Resilience Institute
• Board, National Institute of Science, Space and Security Centers, University of Colorado – Colorado Springs

Commander Mark Boggis is an active duty U.S. Navy Cryptologic Warfare Officer. Currently assigned as the Commanding Officer of Cryptologic Warfare Activity SIXTY FIVE, he leads a 500 Sailor team that provides specialized cryptologic expertise and Signals Intelligence analysis to support the production of information and intelligence to meet the critical security needs of the National Security Agency, fleet, joint, and national customers. Over the past decade, Boggis has served in key DoD cyberspace positions spanning offensive and defensive operations, capability development, and policy. These include:

• Director of Intelligence (J2), US Special Operations Command (SOCOM), Joint Communications Integration Element (JCIE)
• Special Liaison and Technical Operations Officer, Navy Cyber Warfare Development Group (NCWDG)
• Deputy Chief, Tailored Access Operations (TAO) Hawaii
• Deputy Director, U.S. Fleet Cyber Command (FLTCYBERCOM) Cyberspace Operations – Integrated Planning Element (CO-IPE) at U.S. Pacific Command

Boggis is a graduate of the University of North Carolina Wilmington (BA, English) and the University of Maryland University College (MS, Cybersecurity Policy). He also holds certificates from the Naval Postgraduate School (Information Operations), Naval War College (Joint Professional Military Education), National Defense University (Cyber Leadership), and Harvard University (Cybersecurity). Boggis is a 2017 graduate of the Harvard University Cybersecurity Executive Education Program at the John F. Kennedy School of Government. He is currently enrolled in National Defense University’s College of Information and Cyberspace and will receive his second MS (Cyber Leadership) in 2018. His Capstone thesis is titled “Accelerating Public-Private Cybersecurity Information Sharing Partnerships”.

He has served on the Government Relations Working Group since February 2016 and served as the groups Co-Chair since 2017. The Government Relations working group has produced ISAO 600-1: A Framework for State-Level Information Sharing and Analysis Organizations (2018) and ISAO 600-2: U.S. Government Relations, Programs, and Services (2016). A third working group publication, currently in production, will examine the value of Public-Private Information Sharing Partnerships. In addition to supporting the ISAO-SO, Boggis leads the consulting firm Cybersecurity Policy Solutions, LLC and is a member of the Board of Directors of the Cyber Resilience Institute.